Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49276BDCB41C11EDA8B83068C4F9AE02.roa
File: 49276BDCB41C11EDA8B83068C4F9AE02.roa (raw, json)
Hash identifier: rOXI13ZtPoC3vzTgnAjkS4jBgAEKBEWhbxOMjIHCF/w=
Subject key identifier: C2:08:AF:F7:6A:D5:7C:41:85:48:A0:A6:7B:3F:42:3B:25:53:2F:FE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6837
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49276BDCB41C11EDA8B83068C4F9AE02.roa
Signing time: Mon 10 Apr 2023 12:11:44 +0000
ROA not before: Mon 10 Apr 2023 12:11:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 23
45.117.0.0/23 maxlen: 24
45.117.3.0/24 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.188.0/22 maxlen: 24
103.59.212.0/22 maxlen: 24
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.69.238.0/23 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.38.0/24 maxlen: 24
103.177.181.0/24 maxlen: 24
103.178.212.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.174.0/23 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26679 (0x6837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Apr 10 12:11:44 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6433fd00-4425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:82:23:2b:31:a3:71:d0:23:22:33:4d:0a:
94:fd:e8:92:5a:50:e2:e3:f8:84:b2:b2:7a:67:86:
7b:a9:d7:ab:42:4b:a0:1e:c4:b2:ff:c4:9c:59:08:
b8:6d:b7:fd:47:94:33:b2:92:7b:5f:34:9b:7c:d8:
91:14:68:a1:57:14:b3:53:7b:4a:86:3e:f4:0b:24:
66:c8:ff:9c:96:bc:b1:e5:47:e3:8a:cf:56:38:5a:
a1:7a:bd:61:b9:2c:eb:d1:70:a7:b4:c7:8b:3e:47:
73:55:73:a8:bc:60:03:f5:c9:e4:40:4d:b4:96:8d:
d9:50:bc:93:2c:29:b4:e9:86:6b:05:c2:71:a1:90:
28:28:70:91:3e:72:63:32:5a:3f:40:97:26:99:f0:
12:2b:5a:c9:ae:b5:00:69:d1:27:04:db:91:aa:ae:
44:14:e5:3e:18:f5:29:65:a1:ac:dc:de:78:03:d7:
08:f5:32:e9:3f:98:0f:f1:7d:c3:10:dd:75:df:c7:
64:66:31:ff:da:d2:7a:9b:b4:b4:8c:27:24:2d:da:
13:a0:a5:17:17:7b:73:e2:5b:ca:54:10:98:72:f1:
66:0e:e6:49:62:b9:de:ee:84:2d:5b:37:68:f2:fa:
55:90:0a:2e:b1:77:f2:74:4f:f7:c6:d6:aa:52:20:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:08:AF:F7:6A:D5:7C:41:85:48:A0:A6:7B:3F:42:3B:25:53:2F:FE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49276BDCB41C11EDA8B83068C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.188.0/22
103.59.212.0/22
103.66.80.0/22
103.69.238.0/23
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.168.62.0/23
103.173.208.0/23
103.174.38.0/24
103.177.181.0/24
103.178.212.0/23
103.181.209.0/24
103.185.174.0/23
103.204.119.0/24
103.209.18.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:08:d2:95:bc:3b:1e:7d:08:a6:05:2e:14:ca:f1:42:d7:03:
6a:d1:18:6d:f8:3c:0c:8e:ba:bc:a4:80:65:97:ae:78:a5:0b:
ff:ad:4b:66:05:98:2f:10:f6:d0:ba:22:73:89:f7:3c:69:eb:
d1:90:42:3a:b5:d6:9c:69:9f:24:e9:7c:f9:d6:71:ba:eb:3b:
0f:77:80:62:ca:3c:96:5d:ce:a8:4a:e1:e7:2c:34:00:0f:f8:
7b:70:e2:45:7d:8a:88:2d:93:d7:46:1c:9e:ec:77:ac:da:34:
e2:d4:ec:2d:f3:cf:51:1c:18:c6:d0:3c:68:07:48:ac:9c:45:
da:f6:f3:24:24:ab:fd:cf:d9:3a:ec:fc:98:9f:d7:bf:24:e5:
e2:e9:d2:26:40:73:2a:18:4d:14:04:99:5a:66:cb:0a:a9:33:
c3:a0:a7:b6:64:3f:7e:77:7e:bc:62:ff:60:de:46:ee:9e:ad:
12:03:9e:94:b4:5b:8a:c6:87:8b:23:c0:de:b6:eb:3e:02:be:
5c:7b:e6:b5:f6:25:c0:83:6f:98:7a:e0:6c:8c:93:52:4d:c0:
8f:ff:60:7c:2c:68:c9:ad:e9:12:28:c4:46:c3:b4:3a:fd:af:
fc:41:ed:89:50:0a:ff:69:79:7d:94:cc:0a:2a:34:89:dd:7e:
64:bd:e2:9a
-----BEGIN CERTIFICATE-----
MIIG0jCCBbqgAwIBAgICaDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNDEwMTIxMTQ0WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDMzZmQwMC00NDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0iCIysxo3HQIyIzTQqU/eiSWlDi4/iEsrJ6Z4Z7qderQkugHsSy/8ScWQi4
bbf9R5QzspJ7XzSbfNiRFGihVxSzU3tKhj70CyRmyP+clryx5Ufjis9WOFqher1h
uSzr0XCntMeLPkdzVXOovGAD9cnkQE20lo3ZULyTLCm06YZrBcJxoZAoKHCRPnJj
Mlo/QJcmmfASK1rJrrUAadEnBNuRqq5EFOU+GPUpZaGs3N54A9cI9TLpP5gP8X3D
EN1138dkZjH/2tJ6m7S0jCckLdoToKUXF3tz4lvKVBCYcvFmDuZJYrne7oQtWzdo
8vpVkAousXfydE/3xtaqUiAujQIDAQABo4ID9jCCA/IwHQYDVR0OBBYEFMIIr/dq
1XxBhUigpns/QjslUy/+MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDkyNzZCRENC
NDFDMTFFREE4QjgzMDY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggF+BggrBgEFBQcBBwEB
/wSCAW0wggFpMIIBOAQCAAEwggEwAwQCK/EcAwQDK/GAAwQCK/LQAwQDK/LgAwQC
LUBUAwQCLXLAAwQCLXUAAwQCLX94MAwDBAMt+vgDBAAt+voDBAJnDugwDAMEAmca
NAMEAmcaOAMEAmcqoAMEAmcwOAMEAmcwZAMEAWc5YAMEAmc7vAMEAmc71AMEAmdC
UAMEAWdF7gMEAmdK7AMEAmdNmAMEAmdZKAMEAmdvhAMEAmdwIAMEAmeJmAMEAGeU
zwMEAGeZlwMEAGebqgMEAWeivgMEAWejvAMEAWeoPgMEAWet0AMEAGeuJgMEAGex
tQMEAWey1AMEAGe10QMEAWe5rgMEAGfMdwMEAWfREgMEAmfYkAMEAmfaZAMEAmfb
pAMEAmfcUAMEAmfc1AMEA2fiAAMEAmfiHAMEAmfoGAMEAnxsEDArBAIAAjAlMA8D
BAAkBL0DBwAkBL0AAAgwEgMHASQEvQAACgMHBCQEvQAAADANBgkqhkiG9w0BAQsF
AAOCAQEAWwjSlbw7Hn0IpgUuFMrxQtcDatEYbfg8DI66vKSAZZeueKUL/61LZgWY
LxD20Loic4n3PGnr0ZBCOrXWnGmfJOl8+dZxuus7D3eAYso8ll3OqErh5yw0AA/4
e3DiRX2KiC2T10Ycnux3rNo04tTsLfPPURwYxtA8aAdIrJxF2vbzJCSr/c/ZOuz8
mJ/XvyTl4unSJkBzKhhNFASZWmbLCqkzw6CntmQ/fnd+vGL/YN5G7p6tEgOelLRb
isaHiyPA3rbrPgK+XHvmtfYlwINvmHrgbIyTUk3Aj/9gfCxoya3pEijERsO0Ov2v
/EHtiVAK/2l5fZTMCio0id1+ZL3img==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:46 2025 by rpki-client